![Arnaldo Carvalho de Melo](/assets/img/avatar_default.png)
We used libaudit to map ids to syscall names and vice-versa, but that imposes a delay in supporting new syscalls, having to wait for libaudit to get those new syscalls on its tables. To remove that delay, for x86_64 initially, grab a copy of arch/x86/entry/syscalls/syscall_64.tbl and use it to generate those tables. Syscalls currently not available in audit-libs: # trace -e copy_file_range,membarrier,mlock2,pread64,pwrite64,timerfd_create,userfaultfd Error: Invalid syscall copy_file_range, membarrier, mlock2, pread64, pwrite64, timerfd_create, userfaultfd Hint: try 'perf list syscalls:sys_enter_*' Hint: and: 'man syscalls' # With this patch: # trace -e copy_file_range,membarrier,mlock2,pread64,pwrite64,timerfd_create,userfaultfd 8505.733 ( 0.010 ms): gnome-shell/2519 timerfd_create(flags: 524288) = 36 8506.688 ( 0.005 ms): gnome-shell/2519 timerfd_create(flags: 524288) = 40 30023.097 ( 0.025 ms): qemu-system-x8/24629 pwrite64(fd: 18, buf: 0x7f63ae382000, count: 4096, pos: 529592320) = 4096 31268.712 ( 0.028 ms): qemu-system-x8/24629 pwrite64(fd: 18, buf: 0x7f63afd8b000, count: 4096, pos: 2314133504) = 4096 31268.854 ( 0.016 ms): qemu-system-x8/24629 pwrite64(fd: 18, buf: 0x7f63afda2000, count: 4096, pos: 2314137600) = 4096 Cc: Adrian Hunter <adrian.hunter@intel.com> Cc: David Ahern <dsahern@gmail.com> Cc: Jiri Olsa <jolsa@kernel.org> Cc: Namhyung Kim <namhyung@kernel.org> Cc: Wang Nan <wangnan0@huawei.com> Link: http://lkml.kernel.org/n/tip-51xfjbxevdsucmnbc4ka5r88@git.kernel.org [ Added make dep for 'prepare' in 'LIBPERF_IN', fix by Wang Nan to fix parallell build ] Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
135 lines
3 KiB
C
135 lines
3 KiB
C
/*
|
|
* System call table mapper
|
|
*
|
|
* (C) 2016 Arnaldo Carvalho de Melo <acme@redhat.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms and conditions of the GNU General Public License,
|
|
* version 2, as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|
|
* more details.
|
|
*/
|
|
|
|
#include "syscalltbl.h"
|
|
#include <stdlib.h>
|
|
|
|
#ifdef HAVE_SYSCALL_TABLE
|
|
#include <linux/compiler.h>
|
|
#include <string.h>
|
|
#include "util.h"
|
|
|
|
#if defined(__x86_64__)
|
|
#include <asm/syscalls_64.c>
|
|
const int syscalltbl_native_max_id = SYSCALLTBL_x86_64_MAX_ID;
|
|
static const char **syscalltbl_native = syscalltbl_x86_64;
|
|
#endif
|
|
|
|
struct syscall {
|
|
int id;
|
|
const char *name;
|
|
};
|
|
|
|
static int syscallcmpname(const void *vkey, const void *ventry)
|
|
{
|
|
const char *key = vkey;
|
|
const struct syscall *entry = ventry;
|
|
|
|
return strcmp(key, entry->name);
|
|
}
|
|
|
|
static int syscallcmp(const void *va, const void *vb)
|
|
{
|
|
const struct syscall *a = va, *b = vb;
|
|
|
|
return strcmp(a->name, b->name);
|
|
}
|
|
|
|
static int syscalltbl__init_native(struct syscalltbl *tbl)
|
|
{
|
|
int nr_entries = 0, i, j;
|
|
struct syscall *entries;
|
|
|
|
for (i = 0; i <= syscalltbl_native_max_id; ++i)
|
|
if (syscalltbl_native[i])
|
|
++nr_entries;
|
|
|
|
entries = tbl->syscalls.entries = malloc(sizeof(struct syscall) * nr_entries);
|
|
if (tbl->syscalls.entries == NULL)
|
|
return -1;
|
|
|
|
for (i = 0, j = 0; i <= syscalltbl_native_max_id; ++i) {
|
|
if (syscalltbl_native[i]) {
|
|
entries[j].name = syscalltbl_native[i];
|
|
entries[j].id = i;
|
|
++j;
|
|
}
|
|
}
|
|
|
|
qsort(tbl->syscalls.entries, nr_entries, sizeof(struct syscall), syscallcmp);
|
|
tbl->syscalls.nr_entries = nr_entries;
|
|
return 0;
|
|
}
|
|
|
|
struct syscalltbl *syscalltbl__new(void)
|
|
{
|
|
struct syscalltbl *tbl = malloc(sizeof(*tbl));
|
|
if (tbl) {
|
|
if (syscalltbl__init_native(tbl)) {
|
|
free(tbl);
|
|
return NULL;
|
|
}
|
|
}
|
|
return tbl;
|
|
}
|
|
|
|
void syscalltbl__delete(struct syscalltbl *tbl)
|
|
{
|
|
zfree(&tbl->syscalls.entries);
|
|
free(tbl);
|
|
}
|
|
|
|
const char *syscalltbl__name(const struct syscalltbl *tbl __maybe_unused, int id)
|
|
{
|
|
return id <= syscalltbl_native_max_id ? syscalltbl_native[id]: NULL;
|
|
}
|
|
|
|
int syscalltbl__id(struct syscalltbl *tbl, const char *name)
|
|
{
|
|
struct syscall *sc = bsearch(name, tbl->syscalls.entries,
|
|
tbl->syscalls.nr_entries, sizeof(*sc),
|
|
syscallcmpname);
|
|
|
|
return sc ? sc->id : -1;
|
|
}
|
|
|
|
#else /* HAVE_SYSCALL_TABLE */
|
|
|
|
#include <libaudit.h>
|
|
|
|
struct syscalltbl *syscalltbl__new(void)
|
|
{
|
|
struct syscalltbl *tbl = malloc(sizeof(*tbl));
|
|
if (tbl)
|
|
tbl->audit_machine = audit_detect_machine();
|
|
return tbl;
|
|
}
|
|
|
|
void syscalltbl__delete(struct syscalltbl *tbl)
|
|
{
|
|
free(tbl);
|
|
}
|
|
|
|
const char *syscalltbl__name(const struct syscalltbl *tbl, int id)
|
|
{
|
|
return audit_syscall_to_name(id, tbl->audit_machine);
|
|
}
|
|
|
|
int syscalltbl__id(struct syscalltbl *tbl, const char *name)
|
|
{
|
|
return audit_name_to_syscall(name, tbl->audit_machine);
|
|
}
|
|
#endif /* HAVE_SYSCALL_TABLE */
|